{"metadata": {"vulnerability": "CVE-2025-3066", "count": 77, "kinds": {"milestone": 17, "sighting": 18, "kev": 0, "other": 42}}, "data": [{"timestamp": "2025-03-31T22:38:35.656Z", "date_only": false, "value": "2025-03-31T22:38:35.656Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-3066", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-02T00:42:10.030Z", "date_only": false, "value": "2025-04-02T00:42:10.030Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3066", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-02T01:15:37Z", "date_only": false, "value": "2025-04-02T01:15:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MW9F-CFV6-V3RG", "record": "GHSA-MW9F-CFV6-V3RG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-02T01:15:37.873Z", "date_only": false, "value": "2025-04-02T01:15:37.873", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3066", "record": "FKIE_CVE-2025-3066", "field": "published"}, {"timestamp": "2025-04-02T03:01:18.796Z", "date_only": false, "value": "2025-04-02T03:01:18.796071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyxem627", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "48a0f3e2-93ea-4fa0-b99c-027196ba3eba", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyxem627"}, {"timestamp": "2025-04-02T03:31:42Z", "date_only": false, "value": "2025-04-02T03:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MW9F-CFV6-V3RG", "record": "GHSA-MW9F-CFV6-V3RG", "field": "published"}, {"timestamp": "2025-04-02T04:07:09Z", "date_only": false, "value": "2025-04-02T04:07:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21839", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "98d875f1-14e8-48a8-8d7b-90462b02108b", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3066 - Google Chrome Use-After-Free in Navigations Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3066 \nPublished : April 2, 2025, 1:15 a.m. | 32\u00a0minutes ago \nDescription : Use after free in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21839"}, {"timestamp": "2025-04-02T05:51:40.900Z", "date_only": false, "value": "2025-04-02T05:51:40.900591Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llsozo32p72v", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "e3a0c7b7-a122-42d8-a58f-169a871d2eb9", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llsozo32p72v"}, {"timestamp": "2025-04-02T06:19:04.834Z", "date_only": false, "value": "2025-04-02T06:19:04.834171Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/114266914442002489", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "f5108323-15c4-478a-a7ca-c67954146024", "url": "https://infosec.exchange/users/vuldb/statuses/114266914442002489"}, {"timestamp": "2025-04-02T06:19:04.838Z", "date_only": false, "value": "2025-04-02T06:19:04.838307Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/114266914442002489", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "56da7889-dac2-4f19-b086-dec9a1ec641d", "url": "https://infosec.exchange/users/vuldb/statuses/114266914442002489"}, {"timestamp": "2025-04-02T08:37:39.220Z", "date_only": false, "value": "2025-04-02T08:37:39.220735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llsycegyek2v", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "f076b599-30e8-4d47-b0f0-8d0d8984ec01", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3llsycegyek2v"}, {"timestamp": "2025-04-02T15:31:31Z", "date_only": false, "value": "2025-04-02T15:31:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MW9F-CFV6-V3RG", "record": "GHSA-MW9F-CFV6-V3RG", "field": "modified"}, {"timestamp": "2025-04-02T15:48:31.272Z", "date_only": false, "value": "2025-04-02T15:48:31.272185Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114269153563154414", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "d2cc8acb-f62a-46fa-bd3d-c876be6ed689", "url": "https://mastodon.social/users/CyberSignaler/statuses/114269153563154414"}, {"timestamp": "2025-04-02T15:48:31.273Z", "date_only": false, "value": "2025-04-02T15:48:31.273769Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114269153563154414", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "eaf86b23-eec4-4831-afa6-051689888e0e", "url": "https://mastodon.social/users/CyberSignaler/statuses/114269153563154414"}, {"timestamp": "2025-04-02T22:00:00Z", "date_only": false, "value": "2025-04-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-02T23:06:44.365Z", "date_only": false, "value": "2025-04-02T23:06:44.365805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lluiucwdfs23", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "37dab607-8440-4d11-8e28-3a8f678a5cd5", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lluiucwdfs23"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": true, "value": "2025-04-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0275", "record": "CERTFR-2025-AVI-0275", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-03T03:55:17.962Z", "date_only": false, "value": "2025-04-03T03:55:17.962714Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3066", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-03T03:55:17.962Z", "date_only": false, "value": "2025-04-03T03:55:17.962714Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3066", "record": "FKIE_CVE-2025-3066", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-03T22:00:00Z", "date_only": false, "value": "2025-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14967-1", "record": "OPENSUSE-SU-2025:14967-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14967-1", "record": "OPENSUSE-SU-2025:14967-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14967-1", "record": "OPENSUSE-SU-2025:14967-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0275", "record": "CERTFR-2025-AVI-0275", "field": "last_revision_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0275", "record": "CERTFR-2025-AVI-0275", "field": "initial_release_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14967-1", "record": "OPENSUSE-SU-2025:14967-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0275", "record": "CERTFR-2025-AVI-0275", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-04T00:14:41.158Z", "date_only": false, "value": "2025-04-04T00:14:41.158725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3llx54wczvw2i", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "597529fb-3d16-4c6a-8b5d-61ce27855a66", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3llx54wczvw2i"}, {"timestamp": "2025-04-04T07:23:36Z", "date_only": false, "value": "2025-04-04T07:23:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5712", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "ae4be1c5-3042-4c46-8939-39f67e34e2c0", "content": "\u200b\u26a1\ufe0fGoogle \u0438 Mozilla \u0441\u043f\u0435\u0448\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445\n\n\ud83d\udcac Google \u0438 Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Chrome \u0438 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0439 Chrome 135 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 14 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u0432\u044f\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2025-3066, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u0438. \u0422\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c \u0438 \u0434\u0430\u0436\u0435 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 Custom Tabs, Intents \u0438 Extensions, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0415\u0449\u0451 \u0447\u0435\u0442\u044b\u0440\u0435 \u0431\u0430\u0433\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u2014 \u043e\u043d\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u0438, \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438 \u0432\u043a\u043b\u0430\u0434\u043e\u043a.\n\n\u0417\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c $18 000, \u043f\u0440\u0438\u0447\u0451\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0441\u0443\u043c\u043c\u0443 \u2014 $10 000 \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0424\u0438\u043b\u0438\u043f\u043f \u0411\u0438\u0440 \u0438\u0437 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0412\u0435\u043d\u044b \u0437\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 Custom Tabs. \u0420\u0430\u0437\u043c\u0435\u0440 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0442\u0430\u043a \u0447\u0442\u043e \u043e\u0431\u0449\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u0432\u044b\u043f\u043b\u0430\u0442 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0448\u0435.\n\nChrome 135 \u0441\u0435\u0439\u0447\u0430\u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u044f 135.0.7049.52 \u0434\u043b\u044f Linux \u0438 \u043a\u0430\u043a 135.0.7049.41/42 \u0434\u043b\u044f Windows \u0438 macOS.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Firefox 137, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432\u0448\u0438\u0439 \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 XSLTProcessor (CVE-2025-3028), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2025-3030 \u0438 CVE-2025-3034).\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0434\u043c\u0435\u043d\u0435 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 .url \u0432 Windows.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Firefox, Mozilla \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b: \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b Firefox ESR 128.9, Firefox ESR 115.22, Thunderbird 137 \u0438 Thunderbird ESR 128.9 \u2014 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0425\u043e\u0442\u044f \u043d\u0438 Google, \u043d\u0438 Mozilla \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5712"}, {"timestamp": "2025-04-05T07:26:00.225Z", "date_only": false, "value": "2025-04-05T07:26:00.225256Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm2foywt7k2g", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "7a2d1111-8734-4c69-ae22-de050a4c0362", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm2foywt7k2g"}, {"timestamp": "2025-04-05T21:28:22.048Z", "date_only": false, "value": "2025-04-05T21:28:22.048339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm3ur7ceck2k", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "43cc11e0-b6c0-4a27-9c4b-fb2a3501073f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm3ur7ceck2k"}, {"timestamp": "2025-04-06T22:00:00Z", "date_only": false, "value": "2025-04-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-04-06T23:02:41Z", "date_only": false, "value": "2025-04-06T23:02:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0115-1", "record": "OPENSUSE-SU-2025:0115-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-06T23:02:41Z", "date_only": false, "value": "2025-04-06T23:02:41Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0115-1", "record": "OPENSUSE-SU-2025:0115-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-04-06T23:02:41Z", "date_only": false, "value": "2025-04-06T23:02:41Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0115-1", "record": "OPENSUSE-SU-2025:0115-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-06T23:02:41Z", "date_only": false, "value": "2025-04-06T23:02:41Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0115-1", "record": "OPENSUSE-SU-2025:0115-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0286", "record": "CERTFR-2025-AVI-0286", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T16:14:25Z", "date_only": false, "value": "2025-04-08T16:14:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "6086abbc-94a2-4c50-a1e1-2a74ad63ba74", "url": "https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review"}, {"timestamp": "2025-04-08T19:24:33.989Z", "date_only": false, "value": "2025-04-08T19:24:33.989Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2025-3066", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0286", "record": "CERTFR-2025-AVI-0286", "field": "last_revision_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0286", "record": "CERTFR-2025-AVI-0286", "field": "initial_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0286", "record": "CERTFR-2025-AVI-0286", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-09T22:00:00Z", "date_only": false, "value": "2025-04-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-04-10T13:45:46.442Z", "date_only": false, "value": "2025-04-10T13:45:46.442033Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmhnar67ss2y", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "6ee6baf9-65aa-492a-9fd0-ea0dd23c0078", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmhnar67ss2y"}, {"timestamp": "2025-04-10T22:00:00Z", "date_only": false, "value": "2025-04-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-04-13T13:37:12Z", "date_only": false, "value": "2025-04-13T13:37:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0120-1", "record": "OPENSUSE-SU-2025:0120-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-13T13:37:12Z", "date_only": false, "value": "2025-04-13T13:37:12Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0120-1", "record": "OPENSUSE-SU-2025:0120-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-04-13T13:37:12Z", "date_only": false, "value": "2025-04-13T13:37:12Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0120-1", "record": "OPENSUSE-SU-2025:0120-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-13T13:37:12Z", "date_only": false, "value": "2025-04-13T13:37:12Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0120-1", "record": "OPENSUSE-SU-2025:0120-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2025-05-07T15:48:27Z", "date_only": false, "value": "2025-05-07T15:48:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/299", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "4acc553f-b5aa-4c0f-aa27-714b81ed4359", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "url": "https://t.me/NinjaSec/299"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": true, "value": "2025-05-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "last_revision_date"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "initial_release_date"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "revisions.0.revision_date"}, {"timestamp": "2025-05-19T12:58:14Z", "date_only": false, "value": "2025-05-19T12:58:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/298", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "5a34867f-5603-4e04-982c-946198125424", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "url": "https://t.me/NinjaSec/298"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": true, "value": "2025-06-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2025-08-11T18:27:49Z", "date_only": false, "value": "2025-08-11T18:27:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "record": "CVE-2025-3066", "field": "creation_timestamp", "uuid": "d509f8f1-ac05-40ca-bc7e-8771ed374195"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": true, "value": "2025-09-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "last_revision_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "initial_release_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "revisions.0.revision_date"}, {"timestamp": "2026-02-26T18:29:02.955Z", "date_only": false, "value": "2026-02-26T18:29:02.955Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-3066", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:29:02.955Z", "date_only": false, "value": "2026-02-26T18:29:02.955Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3066", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:19:07.690Z", "date_only": false, "value": "2026-06-17T09:19:07.690", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3066", "record": "FKIE_CVE-2025-3066", "field": "lastModified"}, {"timestamp": "2026-08-31T22:00:00Z", "date_only": false, "value": "2026-08-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-08-31T22:00:00Z", "date_only": false, "value": "2026-08-31T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T10:54:34.253Z", "date_only": false, "value": "2026-09-01T10:54:34.253+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0673", "record": "WID-SEC-W-2025-0673", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-20T21:23:57Z", "date_only": false, "value": "2026-09-20T21:23:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0115-1", "record": "OPENSUSE-SU-2025:0115-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:23:57Z", "date_only": false, "value": "2026-09-20T21:23:57Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0115-1", "record": "OPENSUSE-SU-2025:0115-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:23:59Z", "date_only": false, "value": "2026-09-20T21:23:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0120-1", "record": "OPENSUSE-SU-2025:0120-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:23:59Z", "date_only": false, "value": "2026-09-20T21:23:59Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0120-1", "record": "OPENSUSE-SU-2025:0120-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:30:40Z", "date_only": false, "value": "2026-09-20T21:30:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14967-1", "record": "OPENSUSE-SU-2025:14967-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:30:40Z", "date_only": false, "value": "2026-09-20T21:30:40Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14967-1", "record": "OPENSUSE-SU-2025:14967-1", "field": "document.tracking.current_release_date"}]}